Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

in publisher subscriber in Clearpass is publisher only working or both?

This thread has been viewed 1 times
  • 1.  in publisher subscriber in Clearpass is publisher only working or both?

    Posted May 30, 2015 11:35 PM

    as we are implementing clearpass now for wired with Cisco Switchs we noticed that when using the publisher in NAD and doing health checks it working well and said that the PC with required criteria is healthy but when changeing in NAD the RADIUS to be sucscriber IP we face that the posture is becoeming unknown even with everything is ok so what may cause such a problem ?



  • 2.  RE: in publisher subscriber in Clearpass is publisher only working or both?

    Posted May 31, 2015 06:38 PM
    This information it stored cache in the endpoint database and it should be visible by both PUB/SUB

    So when this happens make sure that the posture information hasn't expired ?

    What version of CPPM do you have installed ?


  • 3.  RE: in publisher subscriber in Clearpass is publisher only working or both?

    Posted Jun 01, 2015 02:02 AM

    im using 6.4.0

     

     

    so reqests show on subscriber with unkdown but when changeing it to publisher it is normal healthy so what should I check on ?

     

     

     



  • 4.  RE: in publisher subscriber in Clearpass is publisher only working or both?

    Posted Jun 01, 2015 11:44 AM

    When you make the switch from PUB to SUB check the Policy cache information in the endpoint database .

     

    You can manage that value under the Cluster-wide parameters >General tab > Policy result cache timeout.

     

    Make sure that the SUB is in SYNC with the PUB.

     

    If all these look good then you should consider opening a TAC case or upgrading to the latest 6.4 version.



  • 5.  RE: in publisher subscriber in Clearpass is publisher only working or both?

    Posted Jun 01, 2015 03:33 PM

    Please confirm the PUB + SUB are in Sync?